al Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dustin
Doris
Sent: Friday, 5 March 2004 1:28 AM
To: [EMAIL PROTECTED]
Subject: RE: ldap auth: requiring group membership
You need to add an entry in ldap for the profile you want the reply
items taken from. Right now yo
h result
> rlm_ldap: default_profile/user-profile search failed
> rlm_ldap: looking for check items in directory...
> rlm_ldap: looking for reply items in directory...
> rlm_ldap: user hugh authorized to use remote access
> ldap_release_conn: Release Id: 0
> modcall[authorize]: m
s,dc=megashaf
t,dc=com,dc=au/testpassword to ldap2-dev.megashaft.com.au:389
rlm_ldap: waiting for bind result ...
rlm_ldap: user hugh authenticated succesfully
modcall[authenticate]: module "ldap" returns ok for request 0
modcall: group Auth-Type returns ok for request 0
Sending Access-
Check out www.doris.cc/radius. It is my setup that I am using and does
what you would want. If you have any questions, post to the list and I'll
try to answer them as best as I can.
Dusty Doris
On Tue, 30 Dec 2003, Ryan Henry wrote:
> I have ldap auth working and would like to allow/disallow
I have ldap auth working and would like to allow/disallow access based
on the user being in a certian group.
this shows in the log: modcall: group authenticate returns ok
but there is never any ldap query to check the group.
i have this in my radiusd.conf:
groupname_attribute = cn
groupmembershi
5 matches
Mail list logo